$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: oYk4ZD0ddWYDEkdxV2dswBuTz5YBwwaCp5f7HrGN38s= Subject key identifier: 79:00:0E:87:18:A0:B5:00:1F:B2:BD:5F:A1:E3:44:93:D7:EE:BE:68 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 63AA7DAF4DAC9A367223C6F7F55C039A165EAE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0187 Signing time: Sat 06 Sep 2025 15:51:16 +0000 Manifest this update: Sat 06 Sep 2025 15:46:16 +0000 Manifest next update: Tue 09 Sep 2025 20:49:16 +0000 Files and hashes: 1: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: VkXuKVVTLK86Zntyz3noTNKMVBa73qdlgkTcKJ8Do1Q=) 2: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 3: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 4: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 5: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 6: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 7: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 8: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:aa:7d:af:4d:ac:9a:36:72:23:c6:f7:f5:5c:03:9a:16:5e:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Sep 6 15:46:16 2025 GMT Not After : Sep 9 20:49:16 2025 GMT Subject: CN=79000E8718A0B5001FB2BD5FA1E34493D7EEBE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:d5:fc:32:82:38:47:85:ed:09:48:65:bc: fa:d5:7b:95:aa:74:12:d4:69:8a:6f:d7:94:af:37: 98:86:c4:dc:c9:17:ea:d8:26:19:28:f3:50:3f:e9: de:13:f3:2e:e6:0c:89:33:4c:4d:12:6f:6a:67:89: ee:c1:e6:5b:7d:61:f6:f6:d2:e4:c0:71:09:55:f7: ba:8e:1e:0e:1a:30:24:f2:1c:b4:fd:ce:be:fb:dd: 81:f5:7e:23:6c:d6:42:1b:f6:df:45:9a:d4:80:02: 76:60:ea:2c:7a:90:9d:03:d4:f8:05:23:56:7c:de: 2a:a5:26:70:ec:06:09:ca:fd:91:47:b1:68:d6:41: 86:a6:dc:e5:2c:1f:34:0d:81:c2:53:6f:c0:8c:34: be:6d:70:2d:f4:fc:7b:59:98:6b:d2:5d:f1:2a:04: f6:44:73:89:8d:2d:2c:9a:36:00:42:e4:4d:f3:e8: d4:56:f1:fd:5a:01:e5:14:74:48:33:0d:3c:6b:aa: 55:08:92:ae:32:85:f8:18:b3:cd:83:1a:3d:49:12: af:96:8f:42:2e:cd:f7:72:a6:a7:c8:ec:f5:cb:61: c5:85:cd:7f:f9:01:91:45:22:2b:5a:43:9d:44:66: 41:bf:2e:5e:fc:30:ae:b9:fa:d5:8e:d5:ac:47:f3: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:0E:87:18:A0:B5:00:1F:B2:BD:5F:A1:E3:44:93:D7:EE:BE:68 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d3:15:f1:b6:24:ae:10:30:01:43:1d:65:00:3c:79:c4:25: 44:76:30:25:6f:e4:8f:83:8d:39:c6:32:9e:b7:68:95:0b:1e: 7d:e9:ea:48:97:f1:fa:79:cd:cc:f3:3f:f3:d7:dd:6e:ce:3d: 6b:78:6b:9c:5d:c5:75:d6:40:aa:f5:4e:13:6f:9f:6c:1c:bf: a2:23:95:7a:bd:04:2b:fd:f9:ed:e5:92:a2:24:c8:73:38:19: 9b:9c:95:dc:df:e9:4b:7d:78:2f:ec:87:91:f1:14:55:66:0d: 06:f8:fb:aa:42:3e:e7:7d:b2:ea:21:bc:d0:2a:b3:9c:84:b0: ab:9c:e8:dd:d1:03:28:07:63:b4:3d:7c:15:a5:45:40:e1:85: 10:b0:79:a9:1e:5e:b4:9c:6a:05:5f:45:b9:86:06:ab:2c:b7: 66:aa:3f:81:dc:55:41:64:5e:f4:a2:6c:bd:e9:98:09:40:23: e8:cd:4d:ef:18:f5:37:12:87:b2:b6:6c:1a:56:ac:df:e5:28: c1:15:18:f4:24:8b:3a:16:c5:42:dd:1f:76:4b:8a:05:9a:77: 55:fc:11:7c:ac:44:33:3e:09:12:af:0a:0a:fa:2b:f8:cf:e1: 2e:76:43:dd:1f:50:68:da:ac:28:69:c7:48:be:22:fa:91:69: 30:03:b2:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6p9r02smjZyI8b39VwDmhZerpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA5MDYxNTQ2MTZaFw0yNTA5MDkyMDQ5MTZaMDMxMTAvBgNV BAMTKDc5MDAwRTg3MThBMEI1MDAxRkIyQkQ1RkExRTM0NDkzRDdFRUJFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1etX8MoI4R4XtCUhlvPrVe5Wq dBLUaYpv15SvN5iGxNzJF+rYJhko81A/6d4T8y7mDIkzTE0Sb2pnie7B5lt9Yfb2 0uTAcQlV97qOHg4aMCTyHLT9zr773YH1fiNs1kIb9t9FmtSAAnZg6ix6kJ0D1PgF I1Z83iqlJnDsBgnK/ZFHsWjWQYam3OUsHzQNgcJTb8CMNL5tcC30/HtZmGvSXfEq BPZEc4mNLSyaNgBC5E3z6NRW8f1aAeUUdEgzDTxrqlUIkq4yhfgYs82DGj1JEq+W j0IuzfdypqfI7PXLYcWFzX/5AZFFIitaQ51EZkG/Ll78MK65+tWO1axH8xK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQAOhxigtQAfsr1foeNEk9fuvmgwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/TFfG2JK4QMAFDHWUAPHnEJUR2MCVv5I+D jTnGMp63aJULHn3p6kiX8fp5zczzP/PX3W7OPWt4a5xdxXXWQKr1ThNvn2wcv6Ij lXq9BCv9+e3lkqIkyHM4GZucldzf6Ut9eC/sh5HxFFVmDQb4+6pCPud9suohvNAq s5yEsKuc6N3RAygHY7Q9fBWlRUDhhRCweakeXrScagVfRbmGBqsst2aqP4HcVUFk XvSibL3pmAlAI+jNTe8Y9TcSh7K2bBpWrN/lKMEVGPQkizoWxULdH3ZLigWad1X8 EXysRDM+CRKvCgr6K/jP4S52Q90fUGjarChpx0i+IvqRaTADsqw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:43 2025 by rpki-client